Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/H6xxUfrcR9W9UTVPN1N0VBe0g2s.roa
File: H6xxUfrcR9W9UTVPN1N0VBe0g2s.roa (raw, json)
Hash identifier: HWs5DrNBUJDv4Pwx7wYbzorO0lagZs79p8MKX7zwsgU=
Subject key identifier: 1F:AC:71:51:FA:DC:47:D5:BD:51:35:4F:37:53:74:54:17:B4:83:6B
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 08337604
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/H6xxUfrcR9W9UTVPN1N0VBe0g2s.roa
Signing time: Thu 30 Jun 2022 08:46:02 +0000
ROA not before: Thu 30 Jun 2022 08:46:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204860
IP address blocks: 194.180.110.0/24 maxlen: 24
194.180.115.0/24 maxlen: 24
194.180.150.0/24 maxlen: 24
194.180.154.0/24 maxlen: 24
2a0f:5880::/29 maxlen: 29
2a0f:2a80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137590276 (0x8337604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jun 30 08:46:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fac7151fadc47d5bd51354f3753745417b4836b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:a8:32:10:12:99:6e:3c:dc:98:77:d9:bb:
2a:4a:57:32:5a:a2:28:3c:5a:0f:84:01:72:81:7c:
b8:39:25:0d:7e:d1:2b:21:bb:eb:de:3b:43:78:53:
9c:e0:0a:43:56:d8:bf:c1:c9:7b:96:19:e8:bb:d5:
a0:7d:39:24:5a:7e:ea:2c:4f:ba:e5:d2:30:8a:29:
e7:24:ee:94:6a:c8:88:23:aa:76:81:8b:df:74:5b:
15:fa:d7:47:d1:78:a9:7e:48:47:4a:09:bd:84:6e:
21:bc:3a:bf:6e:50:5c:d3:fb:aa:a8:72:09:30:11:
4f:c6:64:13:ba:b8:93:49:13:fd:4c:d5:af:4e:88:
1f:b5:10:49:2b:3e:32:87:2c:48:f7:73:66:b8:28:
c5:c9:76:0e:53:61:a4:47:da:e9:d5:68:9b:cf:88:
79:66:df:e2:82:5c:be:a3:9e:d8:7d:2e:c7:a2:24:
5e:a0:93:88:c0:92:f8:5d:46:65:33:3e:6d:e9:1b:
7f:66:e5:9c:ff:50:c4:29:a2:d2:9c:dc:44:9d:66:
8b:13:e3:09:3e:c2:34:c7:1e:8f:d4:ff:66:ee:d3:
6e:07:e7:e8:88:4c:c0:62:b8:a9:b5:a5:ff:05:1e:
3c:1c:fb:80:42:0f:6b:8a:8e:13:d8:f1:7d:fc:40:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AC:71:51:FA:DC:47:D5:BD:51:35:4F:37:53:74:54:17:B4:83:6B
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/H6xxUfrcR9W9UTVPN1N0VBe0g2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.110.0/24
194.180.115.0/24
194.180.150.0/24
194.180.154.0/24
IPv6:
2a0f:2a80::/29
2a0f:5880::/29
Signature Algorithm: sha256WithRSAEncryption
2d:d5:46:b4:04:73:5f:24:26:91:66:04:e0:55:df:36:8d:9c:
7c:f1:16:95:db:bb:15:2e:37:b4:b2:01:61:56:05:ea:e6:76:
dd:60:07:f1:65:4b:96:2f:60:92:c7:df:a6:7d:23:6d:1e:0e:
82:34:83:f5:cf:b9:1d:ae:34:d7:87:bb:33:b9:ce:7b:b1:dd:
76:eb:5b:79:5f:81:30:f6:ce:bf:d6:d8:7e:f0:5f:3f:92:f1:
7f:ee:28:2a:28:4e:0b:89:0e:05:8a:04:5f:51:69:ad:e1:53:
34:fd:58:c7:c5:e1:30:de:9e:ce:51:a5:3e:b9:74:1d:6d:89:
ee:0c:7e:5b:ee:00:4f:da:e5:3a:67:45:9d:28:c8:de:59:79:
49:91:8d:7c:a2:72:d6:f6:b3:b8:c3:32:b9:0b:a2:4a:7e:d3:
bf:ae:a8:5e:e8:13:5f:f3:33:69:e7:e0:bf:21:90:65:50:31:
44:aa:fc:6d:f4:a0:6f:4e:44:81:49:7c:17:8c:af:f4:f4:48:
88:0a:56:59:d9:49:75:56:8e:40:03:38:eb:97:69:9a:04:a9:
90:ca:59:71:91:8f:a9:9f:8c:4a:82:e9:1f:83:8f:e0:c9:25:
9f:88:b3:6d:5c:01:5d:c6:77:2f:56:d6:fa:5b:c9:4a:36:8d:
54:b3:0f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:05 2023 by rpki-client on console-fra.rpki-client.org